You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@guacamole.apache.org by "Nick Couchman (Jira)" <ji...@apache.org> on 2021/07/30 00:18:00 UTC

[jira] [Updated] (GUACAMOLE-1391) Add support for hashing passwords with SHA-256 in user-mapping.xml

     [ https://issues.apache.org/jira/browse/GUACAMOLE-1391?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Nick Couchman updated GUACAMOLE-1391:
-------------------------------------
    Priority: Minor  (was: Major)

> Add support for hashing passwords with SHA-256 in user-mapping.xml
> ------------------------------------------------------------------
>
>                 Key: GUACAMOLE-1391
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-1391
>             Project: Guacamole
>          Issue Type: Improvement
>          Components: guacamole-client
>    Affects Versions: 1.3.0
>            Reporter: Andrew Bitson
>            Priority: Minor
>
> Currently, the `user-mapping.xml` file only supports plain-text or MD5. While it is typically expected that this authentication mechanism is only used for small proof-of-concept deployments, it may still be widely used for smaller deployments, like in a home-lab or small business with a limited IT team.
>  
> The changes I'm proposing would add support for the SHA-256 hashing algorithm  to bring the authentication mechanism into the current cryptographic era. MD5 has been broken since near the turn of the century and SHA1 just a few years ago.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)